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^ (57) Abstract: A gate device (8) acquires normal address information indicating the transmission source of a non -attack packet 

O transmitted by an authorized device (address issuing server (10)) resident on a network (2). According to the normal address infor- 
mation acquired, the gate device (8) generates 



CD 

m 

w 



WO 2006/040892 Al 



SL, SZ, TZ, UG, ZM, ZW), J.— =y »>7 (AM, AZ, BY, jfctt4>|PJ*J£: 

KG, KZ, MX), RU, TJ, TM), 3 — □ y (AT, BE, BG, — 
CH, CY, CZ, DE, DK, EE, ES, R, FR, GB, GR, HU, IE, 

IS,IT,LT,LU,LV,MC,NL,PL,PT,RO,SE,SI,SK,TR), 2*^D- Kai/ffeCDSS^ICO^TJi. £8fft*T<**t£ 

OAPI(BF,BJ,CF,CG,CT,CM,GA,GN,GQ,GW,ML, &PCrXi£y hCD^aSlC^«^^T rzj-K£B&I§ 

MR, NE t SN, TO, TG). Otf-f - h j £#fB 0 



norma] condition information indicating a condition of the non-attack packet. Among the packets received from the network, a 
packet matched with the condition indicated in the normal condition information is passed while passing of a packet attacking a 
communication device (7) is limited. " 
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£ i W}£.f$,~fZ> (m Zbb LTV ^„ 

[0093] ^©^mM^-K-^^^^^xAl©^x^^{COV>-ClftMi- 

^Lreasstts^^ hsr^itt^-sigjR© *;®iigiiS3~6^ ^s/h7-^2^b 

[0094] ^-^g8l*,^h!7^^^^aS&Tfc5y-h^^m/^(Cj;o-C«^$ 

*u 3 ^*-^««^oT«fig$n5iim^7s^tp«rtffif*aflijH (Lo Ca 

lAreaNetwork, WT¥Kr L ANji:IEigH-5 0 ) 14|C^$*lTVV5 0 

[0095] *M£§©3{*, *«Ht«4*JJ:W-NI6«8K:«tt**t, * H*M4f4, 

Sfi«»l5^J:V^mC3K^NK$n, *i«^B5tt, iifat^g 1 6*5,1: 

[0096] 02tt. HllC*Lfcy-h«S8©«fi£^^n^H-T?fc5 0 g^t^^fc 

m&%i®2ob, &m&&to$ixiz;<^yb<Dftm*m^®misy*^*&}&i-z 

^#W#^^22{C^$H5lEM^#<t#^ fi gt- 5I EM^^«^fife§|J23 

^yb<Dwm^m^iEm^^^^^sEm^y^^^24b.^ 

^^+^STtt*^^yh©5*>,ii«^7fcm-«a»t*/i^^yh© 

, jEM^^-Y*5«tTJ?^:iE^^^-^{J:S<5v vcte>M7— ^2A»&9lfl| &hdty<*- 
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[0097] &m&*amo\z. h^c^mm^tiit^m^0km^m^x^m%:^'t^ 
m^-Yim^m^m^nm^mm^^xx, ^ c 

[0098] fclfctf, l# a <D&*tt4kWte. JB3te©TK^f9«*Sl92.168.1.1T?fet) (Dst=192.1 
68. 1 .1/32) „ Yy^y^— hM&Zfv r-rvl^TCP (TransmissionControlProtocol) X&> 
<0 (Protocol=TCP) „ TCP7K-h#^580T*fc5 (Port=80) '<^yb&tii*att&bft9 

, ^<Dm^M^<D^<^yb<D^m^-h^5ookbp S ^m^tz^m7ino^±m^ s tc 

m&\Z.ti, &tott&<D/<tryUz&Z>&mtVX$i%l£ilZ 0 
[0099] ffimi^ 2#@<D^^#|4 X iS&OTKWMi «!6Sl92.168.1.2-efc0(Dst=192.1 
68. 1.2/32) , h^^xK— hSO^nha/VjJSUDP (Userdatagramprotocol) "CfcS (Pro 
tocol=UDP)/^yh^^^ < b^0. ^<D^^^<D/N°^hO^^W— h^300k 

[0100] £fc, 3#S tf>*fc*n^#te x ?fc^TKl^tf $8#192.168.1.0~192.168.1.255<D 
$5ISrt-Cfc5 (Dst=192.168.1.0/24)/^5/WS^^i:^t), ^<D^M^<D^ 

[oioi] z<D£y^ m^M^^yucx^m^m^moiz^x^^^i:. 
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[0103] fll*. tf , 1# S ©jEi^lriot, 36flr5c©TKU^ffifa^i72.16.10.0-172.16 
.10.255Ofg|iart-efcS(Src=172.16.10.0/24)^s/h(4, ftS&*ti&)i&V\ ftft 
2#B©Ea*#fcJ:or % f— ^^^(TypeolServiceJ^OxOlT-feS^OS 

=0x01)^5*12, &mb&te£tv&t\ 

[0104] E**fl=fflf«^K»23«» *ii*wi©*t>fis*^»^«i-rftiaiaj"t?*) 

[0105] JUW&fctt, ^©jE«^#fflf#^t<f|J23W:, *s*!7-*2fc^Lfc*»fr;bfe 
T^*#«*»^ffl22Jc»i(rt$*t3itES^#W**H*rr*. JEM 

tteoxma. mm, ^^<Dmm^x^^^xhXi\ 
[0106] Ea*>^^fej*«24ri, »^*^ife^2ii^oT4ia$nfc»»'> 
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[0107] Mz-\L z<DJEtifc>r*<?-Y$ygm24ti* ft*^fcaJ20KJ:oTia3|C*Lfcl# 

S<3V^T, $a9c<DTh*l'Xm 192.1 68. l.l-Cfc!9, h^V^xK— WfcE^nhn^dST 
CPl?fc»5, TCP2K-HS-§-^80T?fe5, ^ft7cOTK^ff#^172.16.10.0~172.1 
6.10.255O®iart-Cfc^^h^rE^^^t, $Z9c(DTl?l'Xffimn92 
.168.1.1T*fcf?, h7>*7#— h^O^°Dh=i^STCP-C$>t), TCPxK— hS-^-^80-efc 
*K 1^-^^^0x0l^fc5/^^h^i-iEMi>'^^-V't^^1-^ o 
[0108] *!E^*^ir£ffc*B 25tt\ *»^^^^fi»2 1 K^oT±jfcfch,fc*»S' 

[0109] 05tt, TO*#<0— WSr^i-H-efcS. 05|;:*5V ">T % 1# g <D*jE&#H\ 500 
kbps«±©e^i^-h7?30^£A_h3iiHK@feftSii-CV S5/^Hfe*LTV ^„ 
, 2#i<^^jE^#fi x 300kbps^±<D^W-h-ei5#^±iSij^^$tbTV^I 
CMP(lnternetControlMessageProtocol) fc^W^tc^^—S&tg (EchoReply) /-^yh 
-Sr^U 3#B<D^jE&#I2 % 300kbps^±©e^l'-h-ei5g>«±jgi^^fi$ti / 

[0110] x<^ryh{HKa|526tt, ^^^^^»21^oT^«*ttfc*J|E^^ 

fifeSB25[J:j;oT^$nfc^E^^^{rS^V>T^s/h!7— ?>frf-7&(X28 

[0111] ^frWlCtt,^<^h(aiSaJ26f4^jE^^+^STr4*5^yh*a3|IU 

[0112] i^*^riI*ng|S27tt, ®mis?*^&£XfiJEM^*^Zm&Mmzh5 
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turn:** 

[0113] $.tz, $^*^»*ni»27tt % y-hmm<DTh^^mm^m^^^xx^ 
^ts m&tp W£tz> 0 ^^^m^aU27icx^y-hmm8<DTh'u^mm 
[0114] sew:. lait^ut* ^©6<D«fig^-raig^os/^0-efcs„ ^\ rc-e 

^S6<t|l3$|{£#|j&£;h,-cv^ 0 COf mmm6it, AJjtf~b30b^ ^vb^;v 

ft*«riEit-t-STK^ft#iait§p38i,TK^<f«feiiifp38(j:fEit$nfcy- 

ffg(539i:?riixLTV^ 0 
[0115] iiT% *jES^*?^&fifc*|S35, ^yh$«ISSP36*J«tU5^^^£f 189537 

[0116] ^^^^^3714, ^^h^JPS^Sei^oT/^HOiiig^JK^tlfc^ 
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[0117] &t s lai^bfc^tcfcv^tt, tpm.mm&£Tftpmmw.5M^ 

cons] z.<nx? ^ y-hmmaiz^x^mam^titcm^Kn, mm^^^x 
&*mmm3~6im*izth, y-mm8&£v*mmw:3~6\z&\,^xs<^b<D 
m^m^^uz^^xi^ mm. v-bmwsic^x&zazfrtc&mmm 

[oii9] TK^fflf &ieitgB38te. *w^<Dfmmmz£vxmtftetbx*s^ r-bm 
ms(D^^YM^m27^^mmm<D^^^mm7%:^xm^isx 

[0120] E| 1 fc*5V vt\ LAN9J4, l^LT*y M7-*2t88R3*i5«:*> 

[0121] LAN9tCgMK$*i,fc7'KW'X38fT1^— y^lOtt, LAN9©TKU-^fl(f«*fcr4LAN 

9fc»«!**ufc«<E*l&i2, i3©TF^^flMl^tpjE«ThV^fiMi3a5flr»*«: 
^liiSSefcieirtTjaSflM-a. tote, iorKi^Wfrif— ^iohu jE&TKwMf 
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[0122] H6fc*jvvc, jEmrh^mmmmmm. Th^x&nD—^ioK^xmm 
[0123] ^±(D^mm^titc^mm^~if^m^mmm^TJ^iic^x, ia7~ 

[0124] £-f % &Wkto^lzm^X*vbV—*>f>'&*^X28\Z£vX3t18£tl1t'* 

^yhiz£z&m&&m&tomoiz^x&toztizk(x^7si) , 
[0125] ®mi/y*^izmxtz&?>^yh<D?^ mm&wmmzmztitz&ft 

^^y<^yh<D^^mT^lE^^^i^jE^^^±^25\ZX^X 
[0126] &tr, m^y^f^r % &&^*^&£XfiTfc>y*^tfs<<>ryhMVm26 

^^>^^^y^^^m^U27izx^xmmmmizh^mmm3ioxw 
[0127] H8«, mizmLiz*mmm<Di/y*^&mmft&mT7u-^~h-?&z 

Xt^S11) 0 

[0128] iki^ mmis?*^*, &&^?*?*&£WJEi'f*?*&s<*yhmfm36 

lz£Zs<^yhmi&&ftkLX&m$tiZ(7Sr>yy°S12) 0 *fc, M^^^fcJ: 
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[0129] m9tt, m\^uz.?-Ymm<o'<^yYMmmft*^ir7n~-?-^y-?& > z> a 

tltc^y h^IE^^-v fcmxtt&Zfr&frfr^try bM mU26^XoXmm 

[0130] ^yha^:E:^*^f^Tte*5£«^ 

IS8B26^ioT J ^£*L5(;*7 i y7 p S22) 0 — ^ybH^jE^^^mX 

[0131] '<^vb&jEM^y*^^xn&ztmmztitzmftim. /<*yb<Dmm>'< 

trvbmmU26\Z£'oXff~si£ixZ>frTy7'S24) 0 — 3>\ s<fryb&JEm.^y*^v 

&frfcs<^ybMm$\l26iZj:<>xmWi£tl5 (*v^S25) 0 
[0132] ^"y^h^^^^-^^^x^^^j^^^^,^.^ ^Miiy^^-^fc 

^^tc^mm^m^^x^m^mmhtitcmm^i,rc^yb<Dmmii^^ 

o fmmm-eiDsvrybfflmmm*, v-bmm<D^ybmmmi¥tm 

[0133] miom. ftWcmv-if^m&mffiw^^ivjEM&ft® mmmw*^ 
i-^~^^mxh^ 0 *i\ y-bmmvTb^xmmfiK y-bmm8<D^^ 

30, S3i) 0 *mmw3\zmto£ntcv , ~bmm<DTb*i'xmmte. *mmm.3<D^ 
y*^*mm7iz^x*mmm4i£*mistiz>(x<ry7*s32) 0 
[0134] *mmm6im&£Htiy-bmm<nTb°i/xmmte, ^meo^mt^ 

MgiJ37{c:J;oT^I8$|g5iC^^n5i:<tt{C (^2/^S33) , TKW^$8KEti 
&38(£ffeli£*l^(;*xs/^ , S34) <) ^*3, ^^@3~5(^VNTt>TK^tf #15 
1tgP38^y-h^g8<^TK^tf#^fEtg$tL-5^^T'«ia^ll&-t-So 
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[0135] ^-C. LAN9OTK^5SfT^w<i0fCJ:oTjE^TK^if 

mw6\zmmztiz>b (x^^s35) , ^mmme^rb^mmmmmsicmm^ 

mTFuxffim&mmis tts (^^^S36) „ 
[oi36] iEmTb'U7,mm^y-mm8<D^yhu-^>^^^28iz^m^h^t, & 

[0137] ^_ki&BJUU:p{^ ^fcM^-^^^^K^^^Krinii, ^yh^- 
^JfeM 2 

[0138] t^-e, ±mmmmix*i^ y-ymmsmiEmTb^mm^m^m^ # 

mWteZtllzmmi5tLZh<DXtefj:\,\ ^X\ ^mmM2X^ lEMTYU^ 

[0139] 0in4. *ftw<Dmmm2\m%ftmLv-\?^m&mmm^^j>.5o<Dm 

^xmmmi imz&mmv~t*^m&m®Wi/xirj*i<D&M)&mm 
#<b£>Kov ^xnm-<Dw-%&ttL,xm.wzGi&-rz> 0 

%mi-ttMTb*uxmmmmv~^59frby-mm58imvxiE®.Th^xm 
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m «HiiHf*-^59lcjBftTKU^fl|f «SrieiibT*5< (Hll©*^y:/2). ^LT, 

IE*rK^ti(fa*26f&L(Hll©^yr4) % y-h^©58^{f UfcjEfcTKU' 
*ffif« fcS^l %TJE^#tf g (lil l l^^^S) ri^LTl ^ 0 

[0141] Jfcfc, i<0^t^M^-t*^|g^^^^^A500^^A^(CoV>TtiiPJ 

[0142] y-Mgfl58tt, y-h^^B{r«to-C#fie$tt, LAN14l3gj^£*l,-CV^ 0 

[0143] *H£Slg53fi, +«afe«544Jj:t«'-h»j«58K:aB«Sn, ***&ffi5 

1 3 ^M53*3 e tOT^TK^tt#fEti^^59(C^^^, 
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[0144] 012(4, mili^Ltz?~hmW58<DMf&$:jr;-r-7v2y?mX'fo% 0 ^<D?—hm 

&mmtom2ot, mwt^^^±^M2\t^ ^Em^wmm.^m22t 

$M73h^ ^Ws7**f- J r'&§M>24k. 7fsE^?*?-*$L]i%U25b, ^yhumn 

26t,mm^^^xxj^iEm^^^mmmm^h^mmm3io^^ 
cons] E^#«^«gp73(4, ^m-y^mmnmt ^m-^Mry^m m 

xmmzm^xiE&ikftmmztki&u ^^vtaEm^mm^si-oxiEm.^ 
wnm&toi$22imM£titiiEM4kftm mzwM-rz> 0 fc*3, lEm^m 

&mia&vxftibtLZ>J:?^xt>£<. fcMmz'iTfrhZ£?Kl.Xt>&\ i/f** 

-yii*afi377«. ±mmmmi k&v ^xnmi,tzv-mm8^m^-r^y^^ 

m^U27icM\^xy-bmm(Drvu^mm<Dm^nt>^\,^7!)mm-r^o 
[oi46] mi3it, mmz.^i,tctpMmw56<D7tivmx3bz> 0 rr-eiif&pj©^ 

32£. ^IEv^^£)&g1S35^ /^yh^JPlSP36i, ^^^-Y^tWEM 

[0147] i/mj-^Mmm, v-hmm8zmm-z>^y*^m*ii®77bm 
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[0148] Mil K*5V vc, UU19\Z.mM£iXlt7Fl'X&ft V— '<6<m, LAN9<DTKU* 

mm, *fct*LAN9t»»s*Lfciiffl«»i2, i3<DTh*\sxmm. -ttthJEmr 

[0149] fc*5 % TKu^afr^— ^60Ht» jBfiTK^flMR«:®(!ttK:»tM-*J:5fcbTl> 

[0150] si±<dxo imf&$thfr&mwv—\?^m&&®Wi'x j rJ*5oiz'z>\ ^ bi 14 
ii^^xm7^m9^m\^xmmvtch<Dtmmx^tc^m.m : tm-r?> 0 

[0151] mi4«. *^^j2l^5^«fcS^-^^|g^:^BS^Iv'^7 t A50(DE^# 

fcIE^TK^tt#^iEmTK^t*^Sttf--^^59{r^$^(^7 i s/^S41) 

&TKW*tf #fE1t^g59K fa ttTi£{f SixSt ^y^"S42) , jBHTK^flMi 
^M*l^#UTE^TK^««iBfiS^B5935^iE^TK^fS«dsy-h^ 
g58{C|^ftT^ft^tu5(^7 t S'yS43) 0 
[0152] lE^TK^ft^^y^h^^ssto^f.yw-^^^^^gSt^^tlSt, 

[0153] #±K9!LfcJ;5K:» 5rtfeSi*-H'^i6?S:*B&»^7 l A50lcj;*T,tf, *s*!7 
-^2^Lfc^^ff^Vv^^h<Di^fa7c^i-iE^rK^^f^/55yw. h ^ 

S58/^<ag^ta£CTi£{f£*K y-h^g58(cM^ttfcJE^TKl/^ft#tr 
[0154] ±.mmMMl%i£Tfi2^]_tzy-bmWite. =>yfc'a-^|:^D^7A^n- 
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KLT*ff1-<5^£K:J:«J«fB36#i-5. MfctblZli^ 3^ a - *<DROM (ReadOnl 
yMemory)4StlCE«rKU^iKfa«rIR#-f JE&TRl^ff $g{£&o*V *T 

Loo, afta^— 5fc^^*3'^5^^hOiii§^$iJHI1-^— ^Sr^tf^n^ 

mmm 3 

toi55] mmmx^ #—hmw& ^mmmicM^xmrn^^^mmu wr,® 

M7_^ 102 _t iz.ffi&'t&JEm fSMM. (7KV*3B trU— ^1 10) KJ:>?i£f9$ 
ttfc^#{cil-^-r5^^h<Diiig^Mboo, ii«*»Sli07^?fe*Sri3i«i5 

/*<yyb<Dmmzmmi-z>£oizL.x^z> 0 z.<Dy—mmio8&jEm.3iWmn 
js*^ *mmwx<D7^;i'?y^y&*smftbi,it>x^z 0 

[0156] d^^EmTK^tf^COiiAn^H^Wait^ ^— h§gffil08O^U 

ofCo r<Dfc#>, *ti0!l3-Ctt, A^jEftTKU^fllf $gtf>il*D£y-^gl08tf> 

[0157] r.©y-h56«i08*SjEaTK^ffif«S:«i#f5BH!:, ^mMmXiZ, 
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[oi58] mz. ^(D^mm^~^^m^mmm^TJ^ioi(D^^m^c^xwi 

[0159] y-h^gl08|*. ^M7-^P^^^X-fe§^-h!>zc^g^if ICXoXm 

j&zti, ^^-^mmm^^xm^tii,mmm^io7^^m^mmmm 

^(LocalAreaNetwork, WT^^rLANj<bf5^-r5 0 ) 114{£^$tvO^ 0 £fc 

[0160] * ^gio3«, *mmwio4&£vy~mwio8izmii!ic£n. *imm 

[0161] Bliett, !2ll5(^L^-h^l08(D^^-t-^n5/^Ii|-Cfe5 o |2|16[^ 
i-«fc5f-, Ctf>y~h£!@108fi, ^s/hr7-^i02^^ff ^^c^yMCiS*^ 
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jE&&#ff m±f&&123t. &&is7*^\Z.mx\±i&s*>ryY<Oo*>. lE&giW 

yh^-^io2i)^is^fhtzy^h(Dmmmmi-^<^bmmm26t^m 
06 \^m-tz>isy*3-\mmu i 27^ *s*!7-* 102 i£^$*wbg-=g^i§ft 

[0162] #«g&*pg|Si20tt, fc^^^6^^^^fc^^t^^*a^#^s^v^T^fe^^*Q-t- 

mtbt&'<^Y(Dtem^-b<Dmm:^, teznttmbtcz^yb 

[0163] ^J^tf, g ^<DT^U^mHH92A68AAX$><0 (Dst=192.1 

68. 1 . 1/32) . h^^xK— bm <Dzfu h=vVtfSTCP (TransmissionControlProtocol) Xh 
>0 (ProtocoI=TCP) » TCP#— h§^8OT*fc5(Port=80)^N"-ir2/h^^p^ < i : ^ 9 

[0164] 2#I©i^#|i 1 JB3fe©TKU^fi!f#^192.168.1.2"C*>9(Dst=192.1 

68.1.2/32), byl'X.tf— h®<^)7 P Ph3^^UDP(Userdatagramprotocol)T?fc5(Pro 

[0165] 3#B<&*fe*n&#f± % 353fe©TKU^«#*Sl92.168.1.0-192.168.1.255© 

fifflrtT?fc5(Dst=192.168.1.0/24)X^yh^tft^^t/j : 5 % -o^^^^ 
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[0166] ^<d±5(c s &tott&<n'<^yl\££Z&m&&m&tom20\z£vx&to£trt>t 

[0167] jEm&ftffi nmmm22t±^ ^y^^^v^if<D^m^<Dmmmm^^x 
m&£tw&. 0i8f4, ?Em$kwmmbiimi22\mMz*&iEm&wmk<D 

[0168] ^Jx«, l#@<DIEM^#{Cio-C, ^«5cOTK^^#*5l72.16.10.0~172.16 
.10.255<O$5fflrt-t?fe5(Src=172.16.10.0/24)^5/h«, ft*£3wfe§*lfcV \ 
fc, 2#g<D5E^#fC c toT > •^-fc^^(TypeofService)^0x01^5(TOS 
=0x01)^5*}*, *»fc****t*:v\ 

[0169] jE«&#ffi$R£/£ffll23H\ *^*«3©*tfiai«:«rasiJ^*«:i-«iai«|J-r 

[0170] ^ftftj^ Cl©jE«*#W«^«|J123tt % *yM7-*102&tf-Ut?fe*&fT 
^Vv^yho^7C^t-]EMTKU^^^^i-5tpm^ill03*fcf4lO 

jE«^#^#^^oTIE^^«^jfii J |f|Ji22tc:«i^$nfciEM^#ft«SrMrr 
lT5 0 -f jE«TKW^fflf**a6firrK^i:L^<^yhtt. iifim8§107(C 
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[oi7i] mmisjr*?v&smi24K. &9&r*7*ttm2iK3&x&jt&tvitm 

[0172] «^.tf % £©!iE«^*^r3y*ttl24Ht, ftm^Dfltl 20fckoTBI17fcja*L 

h^^TCPXhV, TCP5K-h##^80-Cfc«9, a£<@ 7C<DTKl-*tf W172.16.10 
.0~172.16.10.255©$Siart-efc^^5/h^-riEMv'^^t. $&3fc<DTKl^ 
flf##192.168.1.rc*>»>, h^^aK— hJiO^ha/^STCFTfjfeO, TCP#-h# 

So 

[0173] ^jE^^^-^^gC125«, ®&isr*^&mil21iZ^X£l£ZjMz® 

[0174] Hll9f4 % 0fy^-rm-e^5 o HlOfcfcwr, 1# 

500kbpsW±©^W-h^3O#^±igi^m$nTV ^^Hfc^LTV ^ 0 PI 
«K» 2#gO^E^fi, 300kbps^±oe^-h-ei5#^±^^-ff 
V ^ICMP(IntemetControlMessageProtocol) f£Jp#lLfc^=«'-/&:g: (EchoReply) s< 
*$*fc*U 3#g<WE£#fi, 300kbpsW±©^2IW— h-ei5S>^±igi^^ff 

[0175] /<^yMM|«ttl26»a. *»^^+^«J121|Cj;o-rffeJSfe*Kfc*»^^ 
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